Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OguNPV2NwLGXjGtkQvy8Nl5-0Y8.roa
File: OguNPV2NwLGXjGtkQvy8Nl5-0Y8.roa (raw, json)
Hash identifier: XACxRntCsHY6fn2Km5FAGZvdchyY7WK8kYeVyea0zFY=
Subject key identifier: 3A:0B:8D:3D:5D:8D:C0:B1:97:8C:6B:64:42:FC:BC:36:5E:7E:D1:8F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019DCE4D09E93F66B1FFBA75FA61F854FBFB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OguNPV2NwLGXjGtkQvy8Nl5-0Y8.roa
Signing time: Mon 27 Apr 2026 09:37:28 +0000
ROA not before: Mon 27 Apr 2026 09:37:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 94.177.122.0/24 maxlen: 24
185.237.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:4d:09:e9:3f:66:b1:ff:ba:75:fa:61:f8:54:fb:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 27 09:37:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a0b8d3d5d8dc0b1978c6b6442fcbc365e7ed18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8a:7c:09:39:5b:c6:96:2b:62:57:32:12:1f:
57:93:d3:cb:d6:6d:7c:18:5d:f7:fb:84:d2:5d:3a:
35:3b:8b:54:9b:98:78:12:b5:4d:74:f3:f3:82:95:
0d:97:f1:56:37:48:dd:50:2a:f1:f4:01:e9:d8:6b:
ac:d4:80:fc:b6:6f:57:37:5e:c1:2b:fd:d0:e0:a2:
5f:ee:8c:ea:22:ba:82:f0:49:bc:6d:6c:af:44:1b:
1b:6d:30:78:c3:9d:7f:d2:c7:3a:52:25:c6:cf:3b:
92:15:c7:63:0d:c7:91:22:f5:ec:75:6c:3c:a0:ea:
ad:aa:99:bb:ac:72:24:7d:79:1e:06:01:4c:2a:3c:
5f:63:4c:cb:35:79:ee:52:d0:c9:0e:4e:b5:75:d5:
a3:83:ba:03:b6:37:1c:ce:38:78:86:5d:d7:44:fd:
cb:55:a5:39:99:b0:b0:67:df:22:56:17:26:03:25:
0a:8b:c8:9f:43:93:1d:1b:26:13:ba:11:b3:c0:31:
97:97:e2:8c:28:78:f0:a5:f7:fe:af:d5:9c:87:35:
9e:22:2f:67:b8:5c:c6:63:2e:67:74:54:9f:a3:22:
f4:c6:2c:3f:12:23:0f:40:16:8a:35:a7:df:d7:b3:
36:d6:68:e4:27:9b:8b:ec:59:83:ef:fb:28:2a:f4:
40:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0B:8D:3D:5D:8D:C0:B1:97:8C:6B:64:42:FC:BC:36:5E:7E:D1:8F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OguNPV2NwLGXjGtkQvy8Nl5-0Y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.122.0/24
185.237.93.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:94:18:f2:03:9b:11:bb:71:28:5d:63:d0:56:45:43:fc:61:
37:3c:fb:ce:54:04:48:a2:14:80:39:33:b4:c3:0d:97:52:3a:
59:92:91:85:a4:79:1b:77:c0:0c:fb:3f:83:5e:06:77:df:34:
c0:bf:4b:91:17:b4:7e:40:61:a1:d6:93:80:c0:d4:5e:00:38:
6b:14:ab:4e:f7:25:0b:57:1e:70:13:72:32:3e:84:dd:69:c4:
7e:cd:ce:37:8e:e1:e0:d5:4c:77:a9:f6:42:e9:01:44:12:7a:
08:85:db:05:6c:88:dd:1b:6f:3b:fa:65:b0:4a:87:21:8b:c0:
12:2f:09:41:8f:41:bd:33:bf:b2:15:42:b2:81:c0:ad:22:e3:
df:6d:ff:46:3d:7e:9e:2d:e1:f6:89:be:5e:d6:97:12:83:86:
ad:11:e8:cb:00:68:57:70:d5:5f:18:87:d2:e5:98:da:11:a1:
42:e9:6f:de:58:6f:13:9c:4e:8d:a2:cd:37:d1:13:8e:54:f9:
34:ad:5a:f9:68:20:e0:79:99:50:de:01:aa:2e:a0:32:aa:2a:
c9:1f:0a:2a:b5:3e:33:dd:7e:f1:11:e2:5a:b5:fd:0c:d6:3a:
e7:ab:0a:71:38:56:68:fc:26:44:64:58:06:e7:cd:b0:ee:49:
cf:08:64:4c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ3OTQnpP2ax/7p1+mH4VPv7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjYwNDI3MDkzNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTBiOGQzZDVkOGRjMGIxOTc4YzZiNjQ0MmZjYmMzNjVlN2VkMThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIp8CTlbxpYrYlcyEh9Xk9PL1m18
GF33+4TSXTo1O4tUm5h4ErVNdPPzgpUNl/FWN0jdUCrx9AHp2Gus1ID8tm9XN17B
K/3Q4KJf7ozqIrqC8Em8bWyvRBsbbTB4w51/0sc6UiXGzzuSFcdjDceRIvXsdWw8
oOqtqpm7rHIkfXkeBgFMKjxfY0zLNXnuUtDJDk61ddWjg7oDtjcczjh4hl3XRP3L
VaU5mbCwZ98iVhcmAyUKi8ifQ5MdGyYTuhGzwDGXl+KMKHjwpff+r9WchzWeIi9n
uFzGYy5ndFSfoyL0xiw/EiMPQBaKNaff17M21mjkJ5uL7FmD7/soKvRAjwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDoLjT1djcCxl4xrZEL8vDZeftGPMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvT2d1TlBWMk53TEdYakd0a1F2eThObDUtMFk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXrF6AwQA
ue1dMA0GCSqGSIb3DQEBCwUAA4IBAQCdlBjyA5sRu3EoXWPQVkVD/GE3PPvOVARI
ohSAOTO0ww2XUjpZkpGFpHkbd8AM+z+DXgZ33zTAv0uRF7R+QGGh1pOAwNReADhr
FKtO9yULVx5wE3IyPoTdacR+zc43juHg1Ux3qfZC6QFEEnoIhdsFbIjdG287+mWw
Sochi8ASLwlBj0G9M7+yFUKygcCtIuPfbf9GPX6eLeH2ib5e1pcSg4atEejLAGhX
cNVfGIfS5ZjaEaFC6W/eWG8TnE6Nos030ROOVPk0rVr5aCDgeZlQ3gGqLqAyqirJ
HwoqtT4z3X7xEeJatf0M1jrnqwpxOFZo/CZEZFgG582w7knPCGRM
-----END CERTIFICATE-----
Generated at Tue Apr 28 15:59:17 2026 by rpki-client